# CVEs published 2007-02-03

27 CVEs were published on February 3, 2007: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2007-0472](https://cve.now/CVE-2007-0472.md): Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock (no CVSS)
- [CVE-2007-0473](https://cve.now/CVE-2007-0473.md): The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which (no CVSS)
- [CVE-2007-0474](https://cve.now/CVE-2007-0474.md): Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a "design issue with s (no CVSS)
- [CVE-2007-0475](https://cve.now/CVE-2007-0475.md): Multiple stack-based buffer overflows in utilities/smb4k\_\*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers li (no CVSS)
- [CVE-2007-0695](https://cve.now/CVE-2007-0695.md): Multiple SQL injection vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allow remote attackers to execute arbitrary S (no CVSS)
- [CVE-2007-0696](https://cve.now/CVE-2007-0696.md): Cross-site scripting (XSS) vulnerability in error messages in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allows remote attackers t (no CVSS)
- [CVE-2007-0697](https://cve.now/CVE-2007-0697.md): index2.php in ACGVannu 1.3 and earlier allows remote attackers to change the password or profile of a user via a modified id parameter, rela (no CVSS)
- [CVE-2007-0698](https://cve.now/CVE-2007-0698.md): Multiple SQL injection vulnerabilities in ACGVannu 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the id\_mod p (no CVSS)
- [CVE-2007-0671](https://cve.now/CVE-2007-0671.md): Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assist (CVSS 8.8, KEV)
- [CVE-2007-0672](https://cve.now/CVE-2007-0672.md): LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a v (no CVSS)
- [CVE-2007-0673](https://cve.now/CVE-2007-0673.md): LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash) (no CVSS)
- [CVE-2007-0674](https://cve.now/CVE-2007-0674.md): Pictures and Videos on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows user-assisted remote attack (no CVSS)
- [CVE-2007-0675](https://cve.now/CVE-2007-0675.md): A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feat (no CVSS)
- [CVE-2007-0676](https://cve.now/CVE-2007-0676.md): SQL injection vulnerability in faq.php in ExoPHPDesk 1.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id (no CVSS)
- [CVE-2007-0677](https://cve.now/CVE-2007-0677.md): PHP remote file inclusion vulnerability in fw/class.Quick\_Config\_Browser.php in Cadre PHP Framework 20020724 allows remote attackers to exec (no CVSS)
- [CVE-2007-0678](https://cve.now/CVE-2007-0678.md): SQL injection vulnerability in windows.asp in Fullaspsite Asp Hosting Sitesi allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2007-0679](https://cve.now/CVE-2007-0679.md): PHP remote file inclusion vulnerability in lang/leslangues.php in Nicolas Grandjean PHPMyRing 4.1.3b and earlier allows remote attackers to (no CVSS)
- [CVE-2007-0680](https://cve.now/CVE-2007-0680.md): PHP remote file inclusion vulnerability in includes/functions.php in Phpbb Tweaked 3 and earlier allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-0681](https://cve.now/CVE-2007-0681.md): profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original p (no CVSS)
- [CVE-2007-0682](https://cve.now/CVE-2007-0682.md): PHP remote file inclusion vulnerability in theme/include\_mode/template.php in JV2 Folder Gallery 3.0.2 and earlier allows remote attackers t (no CVSS)
- [CVE-2007-0683](https://cve.now/CVE-2007-0683.md): PHP remote file inclusion vulnerability in includes/functions.php in Omegaboard 1.0beta4 and earlier allows remote attackers to execute arbi (no CVSS)
- [CVE-2007-0684](https://cve.now/CVE-2007-0684.md): PHP remote file inclusion vulnerability in portal.php in Cerulean Portal System 0.7b allows remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2007-0685](https://cve.now/CVE-2007-0685.md): Internet Explorer on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows attackers to cause a denial o (no CVSS)
- [CVE-2007-0686](https://cve.now/CVE-2007-0686.md): The Intel 2200BG 802.11 Wireless Mini-PCI driver 9.0.3.9 (w29n51.sys) allows remote attackers to cause a denial of service (system crash) vi (no CVSS)
- [CVE-2007-0687](https://cve.now/CVE-2007-0687.md): SQL injection vulnerability in i-search.php in Michelle's L2J Dropcalc 4 and earlier allows remote authenticated users to execute arbitrary (no CVSS)
- [CVE-2007-0688](https://cve.now/CVE-2007-0688.md): SQL injection vulnerability in oku.asp in Hunkaray Duyuru Scripti allows remote attackers to execute arbitrary SQL commands via the id param (no CVSS)
- [CVE-2007-0670](https://cve.now/CVE-2007-0670.md): Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-02-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.